PT-2022-11778
CVE-2021-43094
·
تاريخ النشر
2022-05-10
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OpenMRS Reference Application Standalone Edition versions 2.11 and earlier
OpenMRS Platform Standalone Edition versions 2.4.0 and earlier
Description
An SQL Injection issue exists via GET requests on arbitrary parameters in the
patient.page. This allows for potential exploitation.Recommendations
For OpenMRS Reference Application Standalone Edition versions 2.11 and earlier, update to a version later than 2.11 to resolve the issue.
For OpenMRS Platform Standalone Edition versions 2.4.0 and earlier, update to a version later than 2.4.0 to resolve the issue.
As a temporary workaround, consider restricting access to the
patient.page until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾